Implementing Message Systems in Multilevel Secure Environments: Problems and Approaches.

摘要

A study of the problems of building multilevel secure message systems. The need for such systems in the government and commercial sectors is growing. Designs are strongly affected by (1) the granularity of security protection (at the level of folders, messages, paragraphs, or words) and (2) planned departures from the Bell-LaPadula security model, for user convenience. A Taxonomy of design alternatives is defined, and sixteen specific approaches are described and compared. (Author)